Library / sourced records

Resource library

Search by kind, technique, environment or critical-reading notes. Each record states its source and what material was reviewed.

770published resources

Results

536 found
Open software—

VerySimpleHoneypot

Material reviewed: Repository documentation

Honeypot configurable by service, port, and response; the documentation says it logs events to syslog.

NetworkHoneypot
Open software—

vnclowpot

Material reviewed: Repository documentation

Low-interaction VNC honeypot that listens on a port and logs responses to a static VNC authentication challenge.

NetworkHoneypot
Open software—

WAPot

Material reviewed: Repository documentation

Honeypot that emulates a default Belkin N300 wireless router administration interface to observe traffic directed at home routers.

NetworkIoTHoneypotDecoy
Open software—

Wetland

Material reviewed: Repository documentation

Wetland is a high-interaction SSH honeypot written in Python that uses Docker containers to provide a real Linux environment, logging brute force attempts as well as attacker shell, SCP, SFTP, exec-command, and port-forwarding sessions.

NetworkEndpointHoneypot
Open software—

WhiteFace HoneyPot

Material reviewed: Repository documentation

Repository documenting how to start and stop WhiteFace HoneyPot and showing rdp.yml and vnc.yml configuration files; it does not explain which services it simulates.

NetworkHoneypot
Open software—

x-proxy

Material reviewed: Repository documentation

x-proxy is sample code accompanying an article on developing a proxy honeypot, consisting of an agent that serves as a proxy, a server that receives and stores collected data in MongoDB, and a management console to view the gathered data.

NetworkHoneypot
Open software—

YAFH

Material reviewed: Repository documentation

SSH and Telnet honeypots that present a fake shell and fake Cisco router login, respectively, and save actions to log files.

NetworkHoneypot
Product—

Zscaler Deception

Material reviewed: Public pageCritical reading

Zscaler product distributing decoys and interaction alerts, according to its product page.

NetworkIdentityDecoyHoneytoken

Each record shows the source reviewed. Vendor claims and independent results are labeled separately.